Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

39
votes
1answer
97k views

What is 1e100.net and why do I have TCP ports open to it?

I see my PC has TCP connections open to 1e100.net. Looking at the content this seems to be a Chinese site and I immediately feared the worst re viruses/malware. Then I checked the whois record and ...
22
votes
3answers
6k views

Why is SSH key authentication better than password authentication?

This isn't so much a technical question as it is conceptual. I understand the cryptography used in an SSH key is far stronger than a regular password, but I don't understand why it is considered more ...
19
votes
4answers
1k views

What are ways to prevent files with the Right-to-Left Override Unicode character in their name (a malware spoofing method) from being written or read?

What are ways to avoid or prevent files with the RLO (Right-to-Left Override) Unicode character in their name (a malware method to spoof filenames) from being written or read in a Windows PC? More ...
18
votes
2answers
2k views

How big of a risk are popular Chrome extensions?

I'm about to switch to Chromium and I installed a couple of extensions. Each time I installed an extension I was notified of which data the extension has access to, e.g.: I do understand that ...
12
votes
7answers
7k views

Wipe RAM on shut down to prevent Cold Boot Attack

My system is encrypted using Full Disk Encryption, i.e. everything except /boot is encrypted using dmcrypt/luks. I am concerned about Cold Boot Attacks, where researchers demonstrated, that content ...
12
votes
2answers
2k views

How can I detect unauthorized access on my 802.11 g/n network?

I am using a wireless network and I want to make sure that no unauthorized users are connecting through my access point. I am using the standard encryption the device supports. I know it is a ...
9
votes
1answer
545 views

“Panic Password” on Linux

I run Linux on my netbook with an encrypted home directory (decrypted when I log in). One idea I had (partly from Cory Doctorow's Little Brother) was to have a password that I could enter which would ...
15
votes
2answers
7k views

fine-grained sudoers configuration (allowed commandline arguments)

is there a straight-forward way to allow a user to run (for example) /usr/bin/pacman -S -u as root, without allowing him to run /usr/bin/pacman -S -u some_package ? The line user ALL=(root) ...
7
votes
10answers
950 views

VPN for a small organization

I am in charge of a small office network that has < 10 users. I want to be able to offer them access to the network from their home internet connections. At the moment we have a regular ...
6
votes
3answers
4k views

Running without admin rights: As users, what can we do to get apps working (that demand admin rights)?

I was prompted to ask this because of following question: Why does the majority of people in the Windows world still appear to not get that working as admin is plain stupid? We all know, deep down, ...
26
votes
3answers
2k views

Can Google Employees See My Passwords Saved in Google Chrome?

I understand that we are really tempted to save our passwords in Google Chrome. The likely benefit is two fold, You don't need to (memorize and) input those long and cryptic passwords. These are ...
11
votes
1answer
8k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
9
votes
4answers
29k views

putty 0.61 : why do I see “Access Denied” message after I enter my login id?

I use putty to login to my RHEL 5.3 server. I'm prompted to enter my login as "login as " and I enter my login Id. as soon as I press ENTER, I see a "Access Denied" message following which I'm ...
9
votes
10answers
707 views

Is email encryption practical enough?

All emails I have ever sent were sent as plain text. Like postcards, everybody on the way to the addressee could easily read and store them. This worries me. I know privacy is something of the past, ...
8
votes
5answers
7k views

Is there a point to using theft tracking software like Prey on my laptop, if you have login security?

Hey, so I have a Thinkpad that I use in a variety of places (coffee shops, work, etc.). I don't generally abandon it, but I figure there's a chance I might get careless and it gets stolen at some ...
7
votes
5answers
1k views

Is it Possible for Hackers to steal password stored in your Browser

I was just wondering if XP passwords can be hacked then why cant a Hacker just hack my passwords stored in my browser. Is it possible for someone to know my browser saved password while I surf the ...
6
votes
3answers
1k views

Worms vs Virus what's the difference? [closed]

I don't understand very well the difference between viruses ans worms, it seems that worms don't need any host to duplicate himself. But somebody can explain it? It means that a worm IS a soft? and ...
3
votes
3answers
2k views

What are reasons to disallow ICMP on my server?

An EC2 Instance has ICMP services disabled by default. While it's not totally clear to me why, I think it's because it could be a potential security risk. At the moment I'm enabling Echo Responses ...
42
votes
4answers
2k views

Should I install Internet Explorer updates although I disabled it?

I have disabled Internet Explorer in the "Windows Features" dialog. Nonetheless Windows Update alerts me that there are security updates for IE. I am aware that I cannot uninstall IE and it remains ...
16
votes
6answers
37k views

Windows 7 never remembers my password credential

Every time I need to connect to something in my company I get a dialog like this So I type in my password(this can popup when I am in IE 9 or outlook or whatever.) and check the box. Say I am in IE ...
15
votes
6answers
4k views

How can visiting a webpage infect your computer?

My mother's computer recently became infected with some sort of rootkit. It began when she received an email from a close friend asking her to check out some sort of webpage. I never saw it, but my ...
11
votes
2answers
3k views

How to find out when a disc (DVD) has been written/burned?

Is there a way/tool to determine the date and time when a disc has been written/burned with high certainty? This is about data forensics and should be a solid proof. I already tried IsoBuster, but it ...
10
votes
1answer
885 views

How to “jail” Java applications in OS X?

Is it possible to "jail" Java applications? My bank has an applet that requests "unrestricted access" to my computer. That makes me feels very uneasy. There should be a way to tell the java ...
8
votes
2answers
540 views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
8
votes
3answers
14k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
6
votes
5answers
67k views

How to avoid Windows Genuine Advantage for an XP update?

I am about to apply updates to a windows xp installation I have not booted in a couple of years. When going to update.microsoft.com, it forced me first to accept an activex installation and now it ...
5
votes
2answers
5k views

What is the SYSTEM group in Windows 7?

I want to disallow access to a drive in Windows 7, to all the users except myself (admin). So I have deleted all the users and groups in the drive's Security dialog but I am not sure whether I should ...
4
votes
2answers
353 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
4
votes
2answers
474 views

How can I prevent Desktop Users from viewing the wireless password?

The title says it; I want to prevent users from viewing the wireless network password on Ubuntu. It's easily viewable through the included application called seahorse.
4
votes
3answers
11k views

How secure is Skype?

I use Skype at work though sometimes for personal use and I am worried anyone can sniff network packets and find out what I'm typing or maybe the network admin can read conversations on the port Skype ...
4
votes
3answers
12k views

Windows Firewall: Logging/Notifying on outgoing request attempts

I'm trying to configure Windows firewall with Advanced Security to log and tell me when programs are trying to make outbound requests. I previously tried installing ZoneAlarm, which worked wonders for ...
4
votes
7answers
11k views

Disk wiping other than DBAN

Sometimes using DBAN takes several days to wipe a disk. What alternatives do you have experience with that work within a few hours and offer the simplicity of DBAN? I am mainly interested in free ...
3
votes
2answers
915 views

Transparent screensaver for linux?

I want to have a few console windows running tail -f on logs. Unfortunately this means that anyone with access to the computer can press Ctrl+c and have shell access. So I want to lock the screen ...
3
votes
2answers
1k views

How to schedule Motion detection

I've just discovered Motion and it works like a charm.. My only problem is that I'd like it to be active only during night-time, but there's no parameter for scheduling.. I think I could write a ...
2
votes
1answer
464 views

http Redirect to https Sometimes Leads to “this page contains other resources which are not secure”

In Chrome (though I may have seen similar behavior in other browsers), type in http://www.google.com. You will always be redirected to https://www.google.com. Usually when I do this, I get the good ...
2
votes
1answer
4k views

Reconfiguring a WiFi Access Point's wireless settings through WPS?

As you may know, WiFi Protected Setup (WPS) has recently been broken. I downloaded and tested Reaver-WPS, the tool that implements the WPS attack. The tool's README file states: Reaver performs a ...
2
votes
1answer
4k views

Scan network for writable shares

I have a small-business network with 30 Windows XP machines on a single subnet and in a simple workgroup, not a domain. I would like to put a process in place that scans the network for writable ...
1
vote
1answer
148 views

Windows method to detect ARP Poisoning in my local network (LAN)?

(This question comes from this thread, and is intended to remain as a reference question/answer pair for more generic ARP network detection not limited to WiFi, or without the need of the specific ...
1
vote
1answer
394 views

What alternative security measures are there to full drive encryption (for performance reasons)?

I'm evaluating full drive encryption using Truecrypt on my Crucial M4 SSD on Windows 7 32bit Pro on my Toshiba NB100 Atom N270 Netbook. I've encrypted this and noticed an increase in the boot time ...
1
vote
1answer
477 views

What is the simplest way to use svn repository through firewall without compromizing the security?

I have a multiple Win xp/7 PCs in a network that have no Internet access. All traffic is routed through a firewall PC (latest ubuntu LTS, without admin). This firewall has limited ports open to ...
33
votes
8answers
13k views

How safe is Firefox password manager?

I have been using the Firefox password manager for long time, but never checked/verified how secure it is.
13
votes
2answers
12k views

Are the insides of LCD monitors dangerous?

I have an LCD monitor that is cracked. So far nothing leaks out but if something starts leaking should I be concerned? I have searched and read everything from: It is safe to be around and ...
11
votes
3answers
3k views

Do I need to have a passphrase for my SSH RSA key?

Before I started at my current job (at a small business), my office had no firewall on the network and literally nothing was ever being backed up. Now that I've signed on as a dedicated sysadmin / ...
11
votes
7answers
5k views

Why is MAC-based authentication insecure?

Most wireless routers can use MAC-based authentication as part of their overall security scheme. It seems like a good idea, but I've heard that it is very ineffective, because it's easy to spoof MAC ...
8
votes
4answers
7k views

How to run Firefox in Protected Mode? (i.e. at low integrity level)

I noticed that Firefox, unlike Chrome and Internet Explorer, doesn't run in the Low Mandatory Level (aka Protected Mode, Low Integrity) Google Chrome: Microsoft Internet Explorer: Mozilla ...
7
votes
2answers
7k views

Windows Defender vs. Security Essentials in Windows 8

What is the difference between Windows Defender on Windows 8 and Microsoft Security Essentials? They practically look alike, so is there a need to install Security Essentials?
7
votes
4answers
3k views

Would you setup a DMZ at home?

From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there? There are a number of ...
6
votes
2answers
2k views

Are anti-static wrist bands really safe?

Is grounding oneself using anti-static wrist band (connected to ground wire & having a protective resistor) still dangerous in case a very high current flows through the ground wire (due to some ...
6
votes
3answers
702 views

saving and searching encrypted mail

I often send and receive gpg-encrypted mail. At the moment I use thunderbird + enigmail (in linux) to do that. As far as I know there is no way in thunderbird to find all encrypted messages which ...
6
votes
3answers
348 views

security concerns in dual-boot Linux, Windows system?

I plan to install Windows Vista on my second hard drive partition, with Ubuntu Hardy remaining on the first partition. How likely is it that any security holes that may exist in Vista could allow ...